mirror of
https://github.com/saymrwulf/onnxruntime.git
synced 2026-06-07 00:13:17 +00:00
7dcb805ab8
### Description This change upgrades a lot of dependencies. There are 2 motivations of doing this change: - fix the security issue reported by dependabot (protobufjs Prototype Pollution vulnerability - https://github.com/advisories/GHSA-h755-8qp9-cq85) - resolve the requirement of using ONNX IR_VERSION 9 (#16638) This requires: - upgrade protobufjs to v7.2.4 - upgrade library 'onnx-proto' to consume latest ONNX release (v1.14.0). Problems: - protobufjs v7.2.4 depends on long.js v5, which does not work well with typescript (commonjs). - onnx-proto depends on this fix with a new release of long.js - long.js is in maintenance and it takes longer than expected to put in new changes Solutions: - use a patch script in `preprepare` to copy type declarations to make long.js work with typescript (commonjs) - generate onnx protobuf JS/TS files and put them under js/web/lib/onnxjs/ort-schema/protobuf folder - remove 'onnx-proto' from dependency. - apply fixes to generated onnx.d.ts |
||
|---|---|---|
| .. | ||
| backends | ||
| ort-schema | ||
| attribute-with-cache-key.ts | ||
| attribute.ts | ||
| backend.ts | ||
| execution-plan.ts | ||
| graph.ts | ||
| instrument.ts | ||
| model.ts | ||
| operators.ts | ||
| opset.ts | ||
| session-handler.ts | ||
| session.ts | ||
| tensor.ts | ||
| util.ts | ||